27a8793e831c20cfdc6dd671e995f92d8a2259c2435253ef310326b43121acd6 | Triage

Sharing

General

Target

27a8793e831c20cfdc6dd671e995f92d8a2259c2435253ef310326b43121acd6
Size

8.8MB
MD5

23ce3c3d566badc409dc3ca91a884046
SHA1

067aa4e9d5cf7cdc72b8522add5f4b3f46b0df4e
SHA256

27a8793e831c20cfdc6dd671e995f92d8a2259c2435253ef310326b43121acd6
SHA512

24159e6c9c38f85a1d1d28217931077de79f57bf0dd87ec12f7141626714a7614619846b1002bbdd6b2cff09d99ef6cc3fc34fab87b7f6fbb9b3fbb0e7ac543f
SSDEEP

196608:yYe4SDb6W8o4gL+vG/pH9tPw0aHow5SzCaUMluV:yYWbiguGxH9BFaIw5XaUMlu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a8793e831c20cfdc6dd671e995f92d8a2259c2435253ef310326b43121acd6

Files

27a8793e831c20cfdc6dd671e995f92d8a2259c2435253ef310326b43121acd6
.exe windows:5 windows x86 arch:x86

99f7cd8e1d401e1513cc4d7dd86e0b98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

FrameRect

gdi32

CreateRectRgnIndirect

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

RegEnumKeyExA

shell32

SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

ole32

DoDragDrop

oleaut32

SysFreeString

oledlg

ord8

oleacc

LresultFromObject

gdiplus

GdipGetImageGraphicsContext

imm32

ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 8.8MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE